Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File:                     UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier:          Fy4byEPAqiYGWCv9MVJ1ooEm2HD7ACPgrHayr6vXw9M=
Subject key identifier:   A6:C6:61:C0:95:59:3B:39:FE:67:F2:0A:1A:3C:F9:BF:01:E0:66:AF
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer:       /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial:       019892FF057E10B35051621DF889695D30F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number:          0EFF
Signing time:             Sun 10 Aug 2025 08:00:43 +0000
Manifest this update:     Sun 10 Aug 2025 08:00:43 +0000
Manifest next update:     Mon 11 Aug 2025 08:00:43 +0000
Files and hashes:         1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: AG6YRZi3IqU234YNZ3FUN9VsMXxt8hVZhUsMlZg9Dcs=)
                          2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:05:7e:10:b3:50:51:62:1d:f8:89:69:5d:30:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
        Validity
            Not Before: Aug 10 08:00:43 2025 GMT
            Not After : Aug 11 08:00:43 2025 GMT
        Subject: CN=a6c661c095593b39fe67f20a1a3cf9bf01e066af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:50:7a:26:c8:d5:99:31:98:65:d6:35:c5:
                    e3:72:84:0d:cc:bf:4e:84:f8:69:e8:9a:fe:4a:e6:
                    d5:24:98:8b:5f:dd:9f:93:dc:9f:8a:01:9f:5b:34:
                    84:19:24:b4:29:0d:3e:45:a1:6b:48:6b:fe:52:10:
                    bf:5c:9b:c8:b0:b8:29:cb:13:f6:6a:bc:2a:0a:19:
                    aa:5c:30:b6:2d:6f:38:a4:86:d5:ba:1c:80:03:4a:
                    c4:5a:80:62:2f:e9:8c:34:2e:19:2f:21:fa:ac:8a:
                    78:ef:9b:07:b1:4e:50:85:c1:da:45:3f:eb:67:f7:
                    f7:3f:88:bd:93:30:7c:5b:72:c7:80:3a:4d:11:a3:
                    38:cf:87:aa:cd:e0:1e:98:ee:fb:b4:25:14:5b:36:
                    7d:94:be:c1:3c:3b:f1:a7:25:23:8e:f2:63:a9:81:
                    b2:23:40:8f:bc:58:8a:d4:8c:ee:24:e5:30:c6:d9:
                    a3:ee:88:81:e0:a3:03:96:47:d1:80:36:33:61:96:
                    91:e2:41:50:3b:5b:47:4b:2c:b0:82:ab:a7:f2:4b:
                    fa:20:55:8f:0d:ce:08:23:80:c6:6d:b3:72:20:9b:
                    51:c1:29:89:e2:a3:5f:d2:16:6e:46:16:ad:3a:8b:
                    e0:6c:9c:75:72:48:e6:b9:cc:4e:74:ca:9b:06:db:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:61:C0:95:59:3B:39:FE:67:F2:0A:1A:3C:F9:BF:01:E0:66:AF
            X509v3 Authority Key Identifier:
                keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:af:4c:4e:3d:c9:65:8f:45:b6:87:0e:b2:cc:78:e6:07:
         af:e4:0e:7d:d0:58:16:67:80:db:d4:e4:64:77:a0:c3:16:f1:
         fe:d4:09:8b:a3:51:aa:57:ee:17:91:9e:48:4f:8a:c5:f1:21:
         54:2e:46:7b:3b:ce:01:e6:4a:e1:db:38:03:19:89:38:0e:e6:
         5e:89:67:d1:be:56:62:9d:ab:b4:21:9a:2c:46:3e:4f:5c:b9:
         99:08:91:d9:0c:4e:21:b7:2b:97:e4:fb:28:89:20:b4:42:36:
         5a:8c:bd:bc:55:56:62:71:87:07:66:06:12:82:dc:42:03:5c:
         f3:f2:73:c7:12:80:6a:ae:0c:3a:0f:c6:b8:5f:1e:85:06:ad:
         97:0d:53:3c:a0:3a:ba:22:32:d8:e1:9e:c2:8a:7b:18:c3:1a:
         58:75:03:11:36:b7:0d:ac:01:22:12:95:8f:ed:a5:25:9c:ba:
         f0:a7:ed:9b:ae:40:c3:e4:7e:df:35:1a:37:6e:74:2a:ec:a7:
         7d:b5:2f:28:74:c2:bd:8c:2d:53:3d:2a:7b:ad:29:71:49:0a:
         92:f4:23:b7:b7:a5:26:81:14:dd:20:fb:1b:20:d3:24:ba:84:
         33:fe:2f:50:16:1d:eb:e8:bd:7b:8f:13:62:a3:b6:91:0e:32:
         66:8d:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:32 2025 by rpki-client